Alexa Hack

Alexa Project was exploited due to smart contract logic issue. The attacker took 45 $BNB.

Alexa Project is a BEP20 token trading on PancakeSwap. The token $ALEXA was listed on the DEX on 1st March 2023. After a few days, the project was exploited due to smart contract logic issue.

The attacker was able to exploit the token's smart contract interaction with PancakePair, which allowed the malicious actor to gain 45.43 $WBNB which is worth 13,256 $USD at the moment. Liquidity was totally removed using a malicious smart contract with unverified source code. The stolen funds were transferred through several EOA addresses.

Attacker address:

https://bscscan.com/address/0x3bec7fe6…2f41ce

Malicious transaction:

https://bscscan.com/tx/0x669c98b1…167be5

Malicious contract:

https://bscscan.com/address/0x9171a1d4…7f9ba2